General

  • Target

    fef786b06e2a0f5df1d7da3ee47daa560741140d873842b22c56b35dd8bdca9d

  • Size

    385KB

  • Sample

    240909-s8mblswdqn

  • MD5

    a42cae35d25670e6866ba67269ac4f88

  • SHA1

    86643d6a4e70327a696a0659567a4fb68ab144f2

  • SHA256

    fef786b06e2a0f5df1d7da3ee47daa560741140d873842b22c56b35dd8bdca9d

  • SHA512

    956ab50e747ef09c8a9a040484472aed2ddc13458016bdb4543323c81e8d037efaef0a8598935edbd92abaab51a2e3f64630d73927ce07849a287ecd3beb824a

  • SSDEEP

    6144:LEmWkJQe9q1j4uLxrHfU+taSi+SZiVP/B3//eJf:LzJjg18uL9fU+xgip/1

Malware Config

Extracted

Family

gcleaner

C2

80.66.75.114

45.91.200.135

Targets

    • Target

      fef786b06e2a0f5df1d7da3ee47daa560741140d873842b22c56b35dd8bdca9d

    • Size

      385KB

    • MD5

      a42cae35d25670e6866ba67269ac4f88

    • SHA1

      86643d6a4e70327a696a0659567a4fb68ab144f2

    • SHA256

      fef786b06e2a0f5df1d7da3ee47daa560741140d873842b22c56b35dd8bdca9d

    • SHA512

      956ab50e747ef09c8a9a040484472aed2ddc13458016bdb4543323c81e8d037efaef0a8598935edbd92abaab51a2e3f64630d73927ce07849a287ecd3beb824a

    • SSDEEP

      6144:LEmWkJQe9q1j4uLxrHfU+taSi+SZiVP/B3//eJf:LzJjg18uL9fU+xgip/1

    • GCleaner

      GCleaner is a Pay-Per-Install malware loader first discovered in early 2019.

    • Downloads MZ/PE file

    • Deletes itself

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks